Data Security Engineer, Lloyds

• We'd welcome applicants from diverse cultural and technological backgrounds, however financial services exposure will be important for this position. We'll need to see evidence of the following in your CV
• Prior experience working at mid to senior level within a relevant role
• Experience of security scanning and testing, including Qualys, Ethical Hacking, SAST & DAST
• Experience of vulnerability management (CVSS)
• Hands on experience of modern security architecture along with diagnostic and monitoring tooling
• Proficient in Cryptographic key management and encryption deployments
• Knowledge of ISO 27001/27002, NIST and/or CIS
• Experience of working with SIEM tooling (Splunk) or similar
• Knowledge of Endpoint Detection and Response tooling (SentinelOne)
• Knowledge of zero trust security for applications
• Good experience in Identity and Access Management
• Knowledge of Operating Systems (Windows, Linux, zOS, CentOS, Unix, Ubuntu and Solaris)
• Familiar with analytic platforms and databases such as MSSQL, Kafka, S3, etc
• Experience of ransomware attack techniques and mitigation strategies
• Exposure to security concepts (MITRE, Kill-Chain)
• Experience of incident response (triage, classification, investigation, and escalation)
• Financial Services experience and exposure to some but not all; payments, cards, pensions, insurance, markets, trade & settlement, logon customer journeys
• Solid verbal and written communication skills to discuss and describe the target architecture with stakeholders

Desirable

• As the Data Resilience Security Engineer, you'll focus on Data Security; assuring the group safeguards data and associated assets from vulnerabilities and threats that could lead to a compromise of the integrity and availability leading to customer harm
• The role reports into the Data Resilience Technical Lead and requires ambitious individuals with a proactive, can-do attitude and solution-oriented approach to deliver at pace
• The primary security contact for data resilience queries
• Provide input and direction on security assessments to identify gaps that could lead to IBS Impact Tolerance thresholds being breached
• Develop security initiatives and guidance for Operational Resilience, Chief Security Office and change frameworks
• Oversee the development of security controls and collaborate with platform teams and Chief Security Office to remediate security gaps
• Perform horizon scanning and provide input to group policies and procedures
• Support and grow team members in security domains of data resilience
• Present data resilience security gaps to peers and senior collaborators